Unscored CVE-2006-0861 EUVD-2006-0866GHSA-v35f-5p3c-hccj

Michael Salzer Guestbox 0.6, and other versions before 0.8, allows remote attackers to obtain the source IP addresses of guestbook entries …

Published Feb 23, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Michael Salzer Guestbox 0.6, and other versions before 0.8, allows remote attackers to obtain the source IP addresses of guestbook entries via a direct request to /gb/gblog.

References

20060302 Re: Guestbox XSS/an admin bypass mailing-list
20060220 Guestbox XSS/an admin bypass mailing-list
ADV-2006-0675 vdb-entry
23376 vdb-entry
guestbox-gblog-obtain-information(24799) vdb-entry
460 third-party-advisory
18946 third-party-advisory